A metadata-driven approach to efficiently detect code-reuse attacks on ARM multiprocessors
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Oh, Hyunyoung | - |
dc.contributor.author | Cho, Yeongpil | - |
dc.contributor.author | Paek, Yunheung | - |
dc.date.accessioned | 2022-07-06T16:29:59Z | - |
dc.date.available | 2022-07-06T16:29:59Z | - |
dc.date.created | 2021-05-11 | - |
dc.date.issued | 2021-07 | - |
dc.identifier.issn | 0920-8542 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/141590 | - |
dc.description.abstract | In recent years, there is a growing need to protect security and privacy of the data against various attacks on software running on smart mobile devices. As of today, the code-reuse attack (CRA) is known as one of the most sophisticated techniques. We in this paper propose a hardware-assisted solution that can be practically deployed into the existing ARM-based mobile devices. We exploit CoreSight debug interface to obtain the core internal information. As the information fed from the debug interface is insufficient for our purpose to detect CRAs, our solution uses the metadata to supplement the lacking information. However, most metadata-driven approaches suffer from the significant storage overhead to store every basic information describing the original data that is vital to their analysis or techniques. As this large space overhead can be a major obstacle to the general acceptance of our solution in ARM-based devices with strict performance constraints, we have endeavored to develop a technique minimizing the memory overhead. Also, we have extended our solution to apply to multiprocessor SoCs as the growing number of computing systems including mobile devices use multiprocessor architectures. Experimental results show that our solution detects CRAs with 1.74% performance overhead in dual-CPU system and requires only 5.66% more memories for storing metadata. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | SPRINGER | - |
dc.title | A metadata-driven approach to efficiently detect code-reuse attacks on ARM multiprocessors | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Cho, Yeongpil | - |
dc.identifier.doi | 10.1007/s11227-020-03542-1 | - |
dc.identifier.scopusid | 2-s2.0-85098966501 | - |
dc.identifier.wosid | 000604854100010 | - |
dc.identifier.bibliographicCitation | JOURNAL OF SUPERCOMPUTING, v.77, no.7, pp.7287 - 7314 | - |
dc.relation.isPartOf | JOURNAL OF SUPERCOMPUTING | - |
dc.citation.title | JOURNAL OF SUPERCOMPUTING | - |
dc.citation.volume | 77 | - |
dc.citation.number | 7 | - |
dc.citation.startPage | 7287 | - |
dc.citation.endPage | 7314 | - |
dc.type.rims | ART | - |
dc.type.docType | Article; Early Access | - |
dc.description.journalClass | 1 | - |
dc.description.isOpenAccess | N | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Hardware & Architecture | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Theory & Methods | - |
dc.relation.journalWebOfScienceCategory | Engineering, Electrical & Electronic | - |
dc.subject.keywordPlus | ARCHITECTURE | - |
dc.subject.keywordPlus | PROTECTION | - |
dc.subject.keywordAuthor | Security of ARM-based device | - |
dc.subject.keywordAuthor | Code-reuse attack | - |
dc.subject.keywordAuthor | Return-oriented programming | - |
dc.subject.keywordAuthor | Jump-oriented programming | - |
dc.subject.keywordAuthor | Metadata | - |
dc.identifier.url | https://link.springer.com/article/10.1007/s11227-020-03542-1 | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
222, Wangsimni-ro, Seongdong-gu, Seoul, 04763, Korea+82-2-2220-1365
COPYRIGHT © 2021 HANYANG UNIVERSITY.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.